Slack

Bot User OAuth token for the Slack Web API.

Fields

FieldDescriptionRequired
Bot User OAuth TokenFrom your Slack app under OAuth & Permissions (starts with xoxb-). Install the app to your workspace first.Yes
Signing SecretFrom Basic Information → App Credentials. Required only for real-time Slack triggers (events) so we can verify inbound event signatures.No

Setup Steps

  • Step 1: Go to api.slack.com/apps and create a new app (From scratch), then pick your workspace.
  • Step 2: Under OAuth & Permissions → Scopes → Bot Token Scopes, add the scopes your workflow needs. Common ones: chat:write, channels:read, channels:history, groups:history, reactions:write, users:read, users:read.email.
  • Step 3: Click Install to Workspace and approve. Copy the Bot User OAuth Token (starts with xoxb-).
  • Step 4: In Falcon Builder, go to Dashboard → Credentials → Add Credential and pick Slack. Paste the bot token.
  • Step 5: Click Test Connection. We call auth.test and confirm the workspace and bot identity.
  • Step 6: Invite the app to any channel it should post to or read from (/invite @YourApp in the channel).
  • Step 7 (real-time triggers only): Copy the Signing Secret from Basic Information → App Credentials into the credential's Signing Secret field. This lets Falcon Builder verify inbound Slack events.

Fast setup: app manifest

When creating the Slack app, choose From an app manifest and paste the YAML below. It pre-declares the bot scopes, event subscriptions, and the Request URL for real-time triggers in one step — then just install and copy the tokens.

display_information:
  name: Falcon Builder
features:
  bot_user:
    display_name: Falcon Builder
oauth_config:
  scopes:
    bot:
      - chat:write
      - channels:read
      - channels:history
      - groups:history
      - reactions:read
      - reactions:write
      - users:read
      - users:read.email
      - files:read
      - app_mentions:read
settings:
  event_subscriptions:
    request_url: https://www.falconbuilder.dev/api/webhooks/slack/events
    bot_events:
      - message.channels
      - app_mention
      - reaction_added
      - file_shared
      - channel_created
      - team_join
  org_deploy_enabled: false
  socket_mode_enabled: false

Trim the scopes and bot_events to only what your workflows use. After installing, the Request URL is verified automatically — Falcon Builder answers Slack's challenge.

Notes

  • The bot can only act in channels it has been invited to.
  • The Search message operation requires a user token (xoxp-) rather than a bot token, because Slack only exposes search to user tokens.